Browse CVEs

HIGH 7.8 CVE-2023-3889 A local non-privileged user can make improper GPU memory processing operations. If the operations are carefully prepared, then they could be used to … Valhall Gpu Kernel Driver Mitigation only Fix from $1,9502023-11-07 MEDIUM 5.5 CVE-2023-4211 KEV A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. 5th Gen Gpu Architecture Kernel Driver Mitigation only Fix from $1,6002023-10-01 HIGH 7.8 CVE-2022-43702 When the directory containing the installer does not have sufficiently restrictive file permissions, an attacker can modify (or replace) the installe… Arm Compiler 6.6.5 / 6.18+ Fix from $1,9502023-07-27 HIGH 7.8 CVE-2022-43703 An installer that loads or executes files using an unconstrained search path may be vulnerable to substitute files under control of an attacker being… Arm Development Studio after 5.29.3 Fix from $1,9502023-07-27 HIGH 7.8 CVE-2022-43701 When the installation directory does not have sufficiently restrictive file permissions, an attacker can modify files in the installation directory t… Arm Compiler 6.20+ Fix from $1,9502023-07-27 HIGH 7.8 CVE-2023-26085 A possible out-of-bounds read and write (due to an improper length check of shared memory) was discovered in Arm NN Android-NN-Driver before 23.02. Nn Android Neural Networks Driver 23.02+ Fix from $1,9502023-06-29 MEDIUM 5.5 CVE-2023-28469 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to alread… Avalon Gpu Kernel Driver Mitigation only Fix from $1,6002023-06-02 MEDIUM 5.5 CVE-2023-28147 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to alread… Avalon Gpu Kernel Driver Mitigation only Fix from $1,6002023-06-02 HIGH 8.8 CVE-2022-46394 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to alread… Avalon Gpu Kernel Driver Mitigation only Fix from $1,9502023-03-08 HIGH 8.8 CVE-2022-46395 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to alread… Avalon Gpu Kernel Driver No fix yet Fix from $1,9502023-03-06 HIGH 8.8 CVE-2022-46891 An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operatio… Bifrost Gpu Kernel Driver Mitigation only Fix from $1,9502023-01-17 HIGH 7.5 CVE-2022-48251 The AES instructions on the ARMv8 platform do not have an algorithm that is "intrinsically resistant" to side-channel attacks. NOTE: the vendor repor… Cortex A53 Firmware No fix yet Fix from $1,9502023-01-10 HIGH 8.8 CVE-2022-42716 An issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operatio… Valhall Gpu Kernel Driver No fix yet Fix from $1,9502022-12-12 HIGH 7.5 CVE-2022-34830 An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to ga… Utgard Gpu Kernel Driver No fix yet Fix from $1,9502022-11-23 HIGH 8.8 CVE-2022-41757 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access t… Valhall Gpu Kernel Driver Mitigation only Fix from $1,9502022-11-08 HIGH 8.8 CVE-2022-38181 KEVEPSS 13% The Arm Mali GPU kernel driver allows unprivileged users to access freed memory because GPU memory operations are mishandled. This affects Bifrost r0… Bifrost Gpu Kernel Driver Mitigation only Fix from $1,9502022-10-25 MEDIUM 6.5 CVE-2022-36449 An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to alread… Bifrost Gpu Kernel Driver No fix yet Fix from $1,6002022-09-01 MEDIUM 5.5 CVE-2022-33917 An issue was discovered in the Arm Mali GPU Kernel Driver (Valhall r29p0 through r38p0). A non-privileged user can make improper GPU processing opera… Valhall Gpu Kernel Driver No fix yet Fix from $1,6002022-08-02 CRITICAL 9.8 CVE-2022-28349 Arm Mali GPU Kernel Driver has a use-after-free: Midgard r28p0 through r29p0 before r30p0, Bifrost r17p0 through r23p0 before r24p0, and Valhall r19p… Bifrost Gpu Kernel Driver Mitigation only Fix from $2,3002022-05-19 CRITICAL 9.8 CVE-2022-28350 Arm Mali GPU Kernel Driver allows improper GPU operations in Valhall r29p0 through r36p0 before r37p0 to reach a use-after-free situation. Valhall Gpu Kernel Driver Mitigation only Fix from $2,3002022-05-19 CRITICAL 9.8 CVE-2022-28348 Arm Mali GPU Kernel Driver (Midgard r4p0 through r31p0, Bifrost r0p0 through r36p0 before r37p0, and Valhall r19p0 through r36p0 before r37p0) allows… Bifrost Gpu Kernel Driver Mitigation only Fix from $2,3002022-05-19 CRITICAL 9.8 CVE-2021-27431 ARM CMSIS RTOS2 versions prior to 2.1.3 are vulnerable to integer wrap-around inosRtxMemoryAlloc (local malloc equivalent) function, which can lead t… Cmsis Rtos after 2.1.3 Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27433 ARM mbed-ualloc memory library version 1.3.0 is vulnerable to integer wrap-around in function mbed_krbs, which can lead to arbitrary memory allocatio… Mbed Ualloc Patch available Fix from $2,3002022-05-03 CRITICAL 9.8 CVE-2021-27435 ARM mbed product Version 6.3.0 is vulnerable to integer wrap-around in malloc_wrapper function, which can lead to arbitrary memory allocation, result… Mbed Patch available Fix from $2,3002022-05-03 HIGH 7.8 CVE-2022-22706 KEV Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, … Bifrost Gpu Kernel Driver Mitigation only Fix from $1,9502022-03-03 HIGH 7.8 CVE-2021-44331 ARM astcenc 3.2.0 is vulnerable to Buffer Overflow in function encode_ise(). Adaptive Scalable Texture Compression Encoder Patch available Fix from $1,9502022-02-28 CRITICAL 9.8 CVE-2021-43086 ARM astcenc 3.2.0 is vulnerable to Buffer Overflow. When the compression function of the astc-encoder project with -cl option was used, a stack-buffe… Adaptive Scalable Texture Compression Encoder No fix yet Fix from $2,3002022-02-28 HIGH 7.8 CVE-2021-44828 Arm Mali GPU Kernel Driver (Midgard r26p0 through r30p0, Bifrost r0p0 through r34p0, and Valhall r19p0 through r34p0) allows a non-privileged user to… Bifrost Gpu Kernel Driver Mitigation only Fix from $1,9502022-01-14 MEDIUM 5.9 CVE-2020-36477 An issue was discovered in Mbed TLS before 2.24.0. The verification of X.509 certificates when matching the expected common name (the cn argument of … Mbed Tls 2.24.0+ Fix from $1,6002021-08-23 HIGH 8.8 CVE-2021-29256 KEV . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory, leading to information disclosure or root privilege e… Bifrost Gpu Kernel Driver Mitigation only Fix from $1,9502021-05-24